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ABSTRACT : 

A method for facilitating two-party electronic commerce transactions between 
trading partners on an unsecure network, such as the Internet. In one example, a 
client makes application for registration by a financial institution in which the 
client has one or more accounts. The client submits satisfactory proof of identity 
and a public key portion for a digital signature to the financial institution. The 
financial institution may provide the client a one time secret by a secure route, 



http://westbrs:9000/bin/ga^^ 8/5/06 



Record Display Form 



Page 3 of 3 



such as conventional mail, which can then be used by the client to show proof of 
its identity. The financial institution authenticates the one time secret and 
combines it with the client's public key in a GUMP Relationship Certificate (GRC), 
which it issues to the client over the network. Once issued, the GRC can be used by 
the client to authenticate its right to access its account (s) or other products or 
services at the financial institution and when conducting other electronic 
transactions over the network. The client digitally signs any such transaction to 
authenticate its right to conduct the transaction . A delegate may be enlisted by 
the client to negotiate the purchase of goods from a seller or for other purposes, 
using a GUMP Delegate Certificate. The concept can be extended to other three party 
transactions, such as issuing an electronic Letter of Credit (L0C) . 
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